PatchTheCVEvastal vulnerabilities
Recent CVEs affecting vastal products. 3 tracked.
vastal has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-01-29. Highest priority: CVE-2018-6367 (score 66/100).
- CVE-2018-6367 CRITICAL 9.8 DOWNGRADE SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request
- CVE-2017-15991 CRITICAL 9.8 MITIGATE Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the pro
- CVE-2017-15975 CRITICAL 9.8 DOWNGRADE Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vuln
FAQ
How do I fix vastal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vastal being exploited right now?
None of the tracked vastal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vastal CVE should I patch first?
CVE-2018-6367 currently ranks highest (66/100): SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request.